The component must be able to enforce configurable usage restrictions on portable and mobile devices connected to it: which devices are allowed, the criteria for connecting and how the restriction is enforced. No component enhancement is named in the IIC list; enforcing the device's security status is the system-level SR 2.3 RE 1.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.